Manifest

$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
File:                     34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json)
Hash identifier:          MKpBjmI4trOqaQceVzWUg5tj29XZlGo5lTR7yhpoRkU=
Subject key identifier:   97:DB:62:38:33:1F:6F:17:C0:1B:E7:1B:A3:D1:A8:61:0A:A8:BF:6B
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Certificate issuer:       /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial:       4B8D5D62594D2C02AD9A9948E78C1910DAFEFE97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access:      rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
Manifest number:          0907
Signing time:             Thu 23 Jul 2026 12:48:12 +0000
Manifest this update:     Thu 23 Jul 2026 12:43:12 +0000
Manifest next update:     Fri 24 Jul 2026 14:42:12 +0000
Files and hashes:         1: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: mOEZZXlbvr0r+t4Err2xpXQIv0HG+ZQx0ZqgTehzL54=)
                          2: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: AjJdum5gnCa7+36v844jqAKHTrJ2KwRmgeY12DZxrgU=)
                          3: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: qT0lMgRpwLFso5naa/mhacL7Cn9IbDh6RYMw8Ne5qR4=)
                          4: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: 3uAkrqhuez17TRSNGWL+mcT//fGQ/vDhgEfqbO+yR7c=)
                          5: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: cbo/b+qUiGch0Ee6VSG/U0yTchpOBV2gq0Anp3RIG0I=)
                          6: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: Om6NqlNn2mDqtN/aRlJUGsjJsBk9Lm1O1udLmvpblkw=)
                          7: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: aFfHNz8vZ8PysUabJdPBqoXohTEKbttrZJTJ/VNXE5I=)
                          8: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: i8MRPT4JW7IJt18fl2YHY7l2cFI+I1Mld1o5o64OPms=)
                          9: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: 3oCbnlvZbHVrmm1N7RiXf87fk015oR3GhA9lb6aGQkw=)
                          10: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: Nv6ui9SXHowVU4sBGSUOUm6OOVWx58pbiXKvXdVEF40=)
                          11: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: 5onGKkrDsL9as4FtjV/uwdgkFR4S3pkEJeM8wIZlyF0=)
                          12: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: 7B1hn/nseYyTK+M9pcx/g9/2nwENdaKXdibJCYVcHIg=)
                          13: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: szqMQq51gue7SKW98pCvcyJemqw5be/J1zq30vj+ZYg=)
Validation:               OK
Signature path:           rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
                          rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 14:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8d:5d:62:59:4d:2c:02:ad:9a:99:48:e7:8c:19:10:da:fe:fe:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
        Validity
            Not Before: Jul 23 12:43:12 2026 GMT
            Not After : Jul 24 14:42:12 2026 GMT
        Subject: CN=97DB6238331F6F17C01BE71BA3D1A8610AA8BF6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2d:ce:20:22:8c:33:05:69:d1:a1:8f:54:4f:
                    e5:64:62:b8:fc:a4:d0:46:47:a6:ce:c9:b1:b6:d7:
                    1f:5c:a9:c6:2a:4b:25:3c:5d:fd:14:db:af:2f:fc:
                    09:58:0d:94:1c:7c:fe:a8:b0:06:89:db:16:b2:a6:
                    bf:47:e8:08:70:26:25:57:16:67:c6:b6:c4:87:f8:
                    7d:cd:ac:ae:6f:f5:c4:a0:66:6f:5f:cb:c2:ce:a7:
                    a0:8c:08:04:2d:ab:cf:9d:95:46:91:59:9d:0f:91:
                    16:d4:7e:99:d6:7e:ee:d3:24:6f:a8:ee:4c:e1:f6:
                    1e:a3:e7:b1:71:b0:2c:b4:d3:35:4a:b2:d7:29:e1:
                    35:eb:a7:98:78:c8:c9:82:8b:6d:1d:14:91:cf:7c:
                    12:3f:50:c3:e9:8e:9e:5f:aa:b4:39:e3:e5:43:b0:
                    af:63:bd:d9:9a:13:3b:08:f3:4f:2b:d4:01:8d:f5:
                    a5:7b:44:2c:42:d9:7c:94:48:a2:ee:e6:00:b8:09:
                    94:a1:4e:9f:4a:c4:c5:c5:ec:df:ff:d8:8d:1c:72:
                    bb:6b:5d:13:9c:d1:ba:58:71:5d:10:7f:0f:68:5f:
                    7f:af:20:f5:2a:5e:f0:cb:09:7c:e4:78:22:f4:05:
                    19:6c:bd:63:2f:31:0a:91:45:cd:3c:73:96:24:f8:
                    a5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DB:62:38:33:1F:6F:17:C0:1B:E7:1B:A3:D1:A8:61:0A:A8:BF:6B
            X509v3 Authority Key Identifier:
                keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:0f:72:f2:d8:3d:db:6a:2d:e2:01:4a:3c:f6:e4:a3:ee:5f:
         4b:9a:e0:98:7e:ae:2c:f2:d8:d2:d9:d1:8f:f6:78:39:78:03:
         f0:68:f3:a5:ce:10:d8:03:03:3b:40:c9:b1:cf:9a:73:50:5f:
         d9:62:f3:c5:01:11:fe:9d:ca:3e:82:c3:15:37:fa:68:56:2d:
         93:e8:4e:d5:c7:62:30:e2:1d:0a:cf:21:3e:fd:0e:46:80:6b:
         cb:4c:c9:05:43:80:af:cb:d5:a4:a3:db:7f:f1:e4:a8:af:da:
         8e:a5:a4:cc:82:e9:81:d8:d2:68:0e:a8:8b:73:63:de:49:ba:
         e5:17:46:f2:3d:2c:3e:5f:83:c6:0f:9a:4a:d7:4d:1a:3e:29:
         d4:1c:d6:83:ac:66:bd:98:ae:c5:c7:5d:a4:21:ce:c5:25:e9:
         09:51:ff:66:6d:97:36:17:93:fb:c3:33:df:f9:d7:77:e7:62:
         71:aa:9f:2e:72:8d:f2:82:a2:0e:58:47:c6:94:a5:46:47:a7:
         bf:76:4d:e8:8d:59:5f:2a:85:15:33:28:90:a0:26:7f:38:01:
         03:64:f5:d6:a9:d1:93:dd:f8:84:5c:60:f7:3d:33:71:9c:2e:
         09:e9:f2:e0:48:9b:a5:30:de:fd:4b:3b:51:b8:0f:4d:42:f7:
         35:78:01:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:54:57 2026 by rpki-client